$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft File: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json) Hash identifier: yACQicQODQjs84OQSTNrIzOlR8ZqeDfmYdD8Fvd5RLU= Subject key identifier: 2D:69:CF:78:64:D0:D2:F4:64:A4:22:08:CB:A1:4A:47:D2:E4:67:7C Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 Certificate issuer: /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft Manifest number: 13 Signing time: Sun 01 Mar 2026 10:32:08 +0000 Manifest this update: Sun 01 Mar 2026 10:32:08 +0000 Manifest next update: Sun 08 Mar 2026 10:32:08 +0000 Files and hashes: 1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: 1IATbtvablnLoJt2P+WJP/GrAD/7G0K/y6Jq9aZh084=) 2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Validity Not Before: Mar 1 10:32:08 2026 GMT Not After : Mar 8 10:32:08 2026 GMT Subject: CN=69a415a8-3e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:96:0b:be:71:b5:ea:8e:44:e9:40:c4:a5: de:54:bc:8f:8c:97:fa:02:e1:4c:b8:3c:b6:62:c3: 66:bc:65:53:b9:02:c3:c8:07:69:9e:6c:15:f0:d9: 0b:83:92:8b:30:46:12:e7:95:bc:2a:65:5f:cd:b7: c2:61:e7:28:8d:6f:d9:46:2e:28:a2:8f:d3:d5:a7: b9:cd:e9:75:4d:a1:4c:9c:48:2f:e4:06:d5:e8:a1: 99:af:ec:5f:9d:0c:8e:c7:d0:db:9a:4e:ed:66:41: be:9a:1d:0e:88:bf:58:ac:3c:ec:8d:01:2e:d4:51: 5b:b0:a2:62:1c:4b:1c:41:7c:52:e5:20:2b:bb:eb: 6d:9b:36:bb:7e:f9:f6:f3:db:a8:6a:1e:1b:cd:23: aa:64:77:3d:db:75:bc:64:60:4c:93:30:8c:15:36: a4:70:c9:91:88:e3:a5:39:e6:81:1b:16:51:a5:43: 12:fc:30:e0:7f:39:ee:8a:dd:43:a2:ab:1b:e5:aa: 14:76:82:f3:ee:ec:1a:dc:56:15:61:71:cb:4d:c6: f4:93:78:79:fd:8b:2e:58:bc:58:17:40:0f:57:f5: 40:6a:61:f6:92:a7:f9:95:4d:93:92:64:92:66:19: ee:2a:17:b2:c5:99:81:5e:55:a5:f2:b4:8b:8b:f3: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:69:CF:78:64:D0:D2:F4:64:A4:22:08:CB:A1:4A:47:D2:E4:67:7C X509v3 Authority Key Identifier: keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7f:2f:2c:2c:47:d8:8b:f1:00:f2:6f:e0:12:a2:84:ab:e0: da:a9:ec:40:3d:5a:24:47:93:9f:02:c8:3c:d3:2f:17:ee:84: 5f:bf:85:ad:4d:f4:00:4b:6a:5f:6e:72:71:84:2e:74:4a:37: 4d:df:81:64:35:4a:9b:12:eb:bc:58:db:1c:ba:99:0e:2d:6d: e5:a0:be:df:0b:61:65:35:5a:8d:48:60:a8:4b:77:34:1a:22: 1e:75:9a:f0:23:f6:58:2b:44:c2:ab:75:51:17:35:13:46:57: d9:f6:22:7f:5a:cc:75:e4:63:77:8e:7a:63:11:11:5b:c6:11: 49:24:23:36:21:bb:a4:ec:43:72:b8:73:d5:ac:11:83:9a:ab: b3:da:84:f9:a0:f4:58:e8:16:dc:22:e9:ae:3b:5d:3f:e8:a5: e4:e9:63:d9:df:a7:67:53:0b:64:a6:da:38:27:f7:01:2c:ff: a5:fc:bc:1b:82:e5:ed:6e:8e:3c:e8:7a:55:46:94:13:de:c1: f6:65:28:2b:db:9e:b1:63:5c:ad:f2:08:0f:6d:01:41:13:dd: 66:9c:b2:65:09:f9:b4:4a:e8:96:50:79:fd:89:8d:e8:bb:3d: d9:3b:0c:41:a1:af:19:13:91:2c:49:98:50:42:f6:6d:25:ab: a9:fb:46:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoQ0RCNDIxMTYyMzNCNDJFRjYzMjU3NTk3RDU2RDEyQUJG RkQ2REUyOTAeFw0yNjAzMDExMDMyMDhaFw0yNjAzMDgxMDMyMDhaMBgxFjAUBgNV BAMTDTY5YTQxNWE4LTNlOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeupYLvnG16o5E6UDEpd5UvI+Ml/oC4Uy4PLZiw2a8ZVO5AsPIB2mebBXw2QuD koswRhLnlbwqZV/Nt8Jh5yiNb9lGLiiij9PVp7nN6XVNoUycSC/kBtXooZmv7F+d DI7H0NuaTu1mQb6aHQ6Iv1isPOyNAS7UUVuwomIcSxxBfFLlICu7622bNrt++fbz 26hqHhvNI6pkdz3bdbxkYEyTMIwVNqRwyZGI46U55oEbFlGlQxL8MOB/Oe6K3UOi qxvlqhR2gvPu7BrcVhVhcctNxvSTeHn9iy5YvFgXQA9X9UBqYfaSp/mVTZOSZJJm Ge4qF7LFmYFeVaXytIuL89WZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULWnPeGTQ 0vRkpCIIy6FKR9LkZ3wwHwYDVR0jBBgwFoAUzbQhFiM7Qu9jJXWX1W0Sq//W3ikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzM0NkVDRjEyRkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5akpYV1gxVzBTcV9fVzNp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemJRaEZpTTdRdTlqSlhXWDFXMFNxX19XM2lrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzM0NkVDRjEyRkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5 akpYV1gxVzBTcV9fVzNpay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9fy8sLEfYi/EA8m/gEqKEq+DaqexAPVokR5OfAsg80y8X7oRfv4WtTfQAS2pf bnJxhC50SjdN34FkNUqbEuu8WNscupkOLW3loL7fC2FlNVqNSGCoS3c0GiIedZrw I/ZYK0TCq3VRFzUTRlfZ9iJ/Wsx15GN3jnpjERFbxhFJJCM2Ibuk7ENyuHPVrBGD mquz2oT5oPRY6BbcIumuO10/6KXk6WPZ36dnUwtkpto4J/cBLP+l/LwbguXtbo48 6HpVRpQT3sH2ZSgr256xY1yt8ggPbQFBE91mnLJlCfm0SuiWUHn9iY3ouz3ZOwxB oa8ZE5EsSZhQQvZtJaup+0YD -----END CERTIFICATE-----Generated at Mon Mar 2 12:32:08 2026 by rpki-client